This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json) Hash identifier: P4Ad9NGGSBYcMwKh9Ff6AiE2p8CHcbXvXH+zsnFKX8Y= Subject key identifier: F0:0F:B8:7D:4E:3C:A6:26:99:57:06:FF:85:9E:39:8C:29:E6:C4:E7 Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e Certificate serial: 019C427DBB9D680CE2DEACF8D2F57879F47B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft Manifest number: 092B Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: JeDYGYclrlf9AJZJpAB4OBedJD2lEx4SLym/67tn0kw=) 2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bb:9d:68:0c:e2:de:ac:f8:d2:f5:78:79:f4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=f00fb87d4e3ca626995706ff859e398c29e6c4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:ab:85:e4:46:a8:14:35:06:bd:37:f9:8d: 4e:45:e0:94:34:07:c4:92:ee:a4:de:ea:6e:36:4e: 76:bc:61:7f:7a:9c:1d:d2:39:bd:7c:e6:35:2d:b9: 6d:00:d1:32:8d:dd:57:63:be:f2:bd:07:90:cc:5f: 40:df:a4:fc:36:9c:67:a7:10:e8:f9:8b:69:40:99: 26:3d:be:b6:15:c7:64:99:4d:15:6a:a6:ac:a0:2f: 38:31:fa:ca:6b:6c:14:de:6b:81:c1:66:7b:5f:f5: b8:36:91:a3:ce:60:d9:84:af:3a:e2:7d:43:3a:98: 03:0b:a8:05:35:8a:69:9e:35:56:96:b0:ad:2f:19: f2:ea:73:52:74:50:6d:70:e6:b5:35:2e:1c:e6:24: 65:4f:00:43:73:05:5a:42:40:af:04:4b:94:48:20: d3:2e:56:f8:ec:c9:b4:99:6f:13:83:89:0e:04:71: f3:b1:9a:35:67:f0:7b:1d:4c:e1:fe:d4:8a:09:7e: 59:b6:2b:47:b6:2a:2d:04:52:99:30:3e:94:03:2e: a4:f6:ae:6f:e7:e7:0e:7f:4d:7f:a0:ff:ce:4d:c8: c9:9c:b0:8f:ef:25:eb:d0:54:e9:d2:7b:db:7f:4a: 73:27:fe:3f:7e:02:b4:44:e9:39:14:a5:c9:27:a8: 2b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0F:B8:7D:4E:3C:A6:26:99:57:06:FF:85:9E:39:8C:29:E6:C4:E7 X509v3 Authority Key Identifier: keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:98:da:c0:dc:13:28:15:3f:bd:71:75:97:19:cc:4f:6c:15: b3:78:87:46:ab:05:47:0f:ae:e6:b1:b3:85:97:fd:b9:a1:b9: 8c:63:eb:6b:d0:e3:fb:9e:9b:32:a4:0a:23:03:91:2d:a6:27: 2f:c6:14:39:94:82:05:ce:d0:37:75:51:40:d5:6c:4a:89:99: c8:92:48:d9:37:6e:24:73:a2:6f:a5:e3:5a:30:3f:a8:71:c1: 8b:91:23:16:01:5c:64:d3:f7:2b:fe:f1:fd:c6:5d:d5:63:85: 2e:af:7b:9a:de:86:53:e6:a1:95:a6:e0:6e:85:26:27:fa:25: 76:c6:a7:8c:03:34:4c:6c:60:b7:02:f7:f3:b3:f9:d4:a1:da: e8:5c:10:0c:d8:fb:8a:94:ad:37:cd:5e:94:4f:09:d4:88:37: 06:1e:bc:c8:93:27:9d:d4:68:6e:75:47:a5:42:48:c9:e3:a4: 99:53:33:9f:68:ba:5a:a3:c2:f9:dc:a1:6c:47:fa:38:9f:72: 89:64:f7:70:5d:22:c6:ea:f7:d8:37:81:54:24:ef:e5:b7:26: e5:02:83:1a:cf:cc:e5:19:02:79:40:c4:48:bd:b7:59:c4:2e: 59:46:7f:51:e3:30:fc:81:67:8f:c5:11:ab:89:d2:66:83:77: cf:81:cf:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbudaAzi3qz40vV4efR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZjIzNTdhNDFmNGU1OTBiYTYyZTc3MWQyMDU0ZTAwOGUw ZWQ5MWUwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD EyhmMDBmYjg3ZDRlM2NhNjI2OTk1NzA2ZmY4NTllMzk4YzI5ZTZjNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+mrheRGqBQ1Br03+Y1OReCUNAfE ku6k3upuNk52vGF/epwd0jm9fOY1LbltANEyjd1XY77yvQeQzF9A36T8NpxnpxDo +YtpQJkmPb62FcdkmU0VaqasoC84MfrKa2wU3muBwWZ7X/W4NpGjzmDZhK864n1D OpgDC6gFNYppnjVWlrCtLxny6nNSdFBtcOa1NS4c5iRlTwBDcwVaQkCvBEuUSCDT Llb47Mm0mW8Tg4kOBHHzsZo1Z/B7HUzh/tSKCX5ZtitHtiotBFKZMD6UAy6k9q5v 5+cOf01/oP/OTcjJnLCP7yXr0FTp0nvbf0pzJ/4/fgK0ROk5FKXJJ6grFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAPuH1OPKYmmVcG/4WeOYwp5sTnMB8GA1UdIwQY MBaAFADyNXpB9OWQumLncdIFTgCODtkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjIt NWUwZmE5NGJjMzcwLzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjItNWUwZmE5NGJjMzcw LzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpjawNwT KBU/vXF1lxnMT2wVs3iHRqsFRw+u5rGzhZf9uaG5jGPra9Dj+56bMqQKIwORLaYn L8YUOZSCBc7QN3VRQNVsSomZyJJI2TduJHOib6XjWjA/qHHBi5EjFgFcZNP3K/7x /cZd1WOFLq97mt6GU+ahlabgboUmJ/oldsanjAM0TGxgtwL387P51KHa6FwQDNj7 ipStN81elE8J1Ig3Bh68yJMnndRobnVHpUJIyeOkmVMzn2i6WqPC+dyhbEf6OJ9y iWT3cF0ixur32DeBVCTv5bcm5QKDGs/M5RkCeUDESL23WcQuWUZ/UeMw/IFnj8UR q4nSZoN3z4HPxg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:33:37 2026 by rpki-client